Cyber Operator

Arete

11d

About The Position

Arete Incident Response is seeking a Cyber Operator for its Threat Fusion Center to monitor and record cybercrime activity, help build threat actor monitoring services, and advise stakeholders on ransomware threats. The role focuses on tracking known adversaries and emerging threats and contributing research and threat intelligence products for Arete’s stakeholders. The successful candidate will be motivated to learn new Tactics, Techniques, and Procedures (TTPs) and how cyber threat groups use them during cybercrime activity.

Requirements

Be a self-starter with a passion for cyber threat intelligence.
Ability to produce high-quality intelligence services under short deadlines.
Knowledge of, or a passion to learn about, the cyber threat landscape, especially ransomware groups.
Desire to expand knowledge of threat actor TTPs and the technical aspects of tools and techniques used by cybercrime threat actors.
Strong written and verbal communication skills in English.
Ability to work all global hours, including weekends and holidays, and availability for at least 25 hours weekly.
Be enrolled in a degree program with at least two years remaining to complete.

Nice To Haves

1–2 years of experience or education in cybersecurity, cyber intelligence, national security, law enforcement, or a related field.

Responsibilities

Collaborate with Digital Forensics Incident Response (DFIR) teams to monitor threat actor activity and coordinate threat actor tracking.
Profile threat actor groups by analyzing case reports and raw and open-source intelligence, and document their TTPs.
Identify and report on current and changing TTPs used by cyber threat actors.
Identify intelligence gaps and submit Requests for Information (RFIs) to address them.
Respond to RFIs from internal stakeholders and external customers.